| शीर्षक | KylinSoft hedron-domain-hook <=3.8.0.12-0k0.5 local privilege escalation |
|---|
| विवरण | This vulnerability allows local attackers to elevate their privileges using the dbus service in Kylin OS. When an attacker has local access, they can exploit the vulnerability by sending malicious requests to the init_kcm function within com.kylin.kydevmonit.domainhook. It's a builtin and enabled by default DBus service.
By constructing specific requests and exploiting the security flaw in the init_kcm function, an attacker can gain root privileges than their current level. Successfully exploiting this vulnerability enables the attacker to perform potentially malicious actions, such as modifying system configurations, accessing sensitive data, or executing other dangerous operations. |
|---|
| स्रोत | ⚠️ https://note.zhaoj.in/share/B05NqMPvEqoU |
|---|
| उपयोगकर्ता | glzjin (UID 59815) |
|---|
| सबमिशन | 12/12/2023 10:28 AM (3 साल पहले) |
|---|
| संयम | 20/12/2023 06:48 PM (8 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 248578 [KylinSoft hedron-domain-hook तक 3.8.0.12-0k0.5 DBus init_kcm अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|